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o ■ 
o : 

CN) . Abstract 

A vast and interesting family of natural semantics for belief revision is denned. 

■ Suppose one is given a distance d between any two models. One may then define 
qq \ the revision of a theory A' by a formula a as the theory defined by the set of all 
H ' those models of a that are closest, by d, to the set of models of K. This family is 

characterized by a set of rationality postulates that extends the AGM postulates. 
|^ The new postulates describe properties of iterated revisions. 

ii; 1 Introduction 

> 1 1.1 Overview and related work 

in : 

The aim of this paper is to investigate semantics and logical properties of theory revisions 

■ based on an underlying notion of distance between individual models. In many situations 
it is indeed reasonable to assume that the agent has some natural way to evaluate the 
distance between any two models of the logical language of interest. The distance between 
model m and model m! is a measure of how far m! appears to be from the point of view of 
m. This distance may measure how different m! is from m under some objective measure: 
e.g., the number of propositional atoms on which m! differs from m if the language is 

^ . propositional and finite, but it may also reflect a subjective assessment of the agent about 
its own capabilities such as, for example, the probability that, if m is the case, the agent 
(wrongly) believes that m! is the case. Any such distance between models may be used 
to define a procedure for theory revision: both a theory T and a formula a define a set 
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of models, M(T) and M(a), respectively, and the result of revising T by a, T * a, is the 
theory of the set of those models of M(a) that are closest to M(T). 
The purpose of this paper is not to suggest specific useful notions of distance. It assumes 
some abstract notion of a distance is given and studies the properties of the revisions 
defined by this distance. The distances that will be considered in this paper do not always 
satisfy the properties generally accepted for distances, they are really pseudo-distances. 
There is no obvious reason why, in particular, our distance should satisfy the triangular 
inequality or even be symmetric. It may be the case that, from the perspective of m, to' 
looks very far away, but, from the perspective of to', to looks close by. In the terms of 
one of our examples above: if to is the case, our agent may give a very low probability to 
to' being the case, but if to' is the case, our agent may well be hesitant about whether to 
or to' is the case: assume, for example, that to and to' differ by the value of one atomic 
proposition p that is tested by our agent. The test for p may well be very reliable if p is 
the case but quite unreliable if p is not the case. 

1.1.1 Related work 

In [AGM85], Alchourron, Gardenfors and Makinson introduced the study of theory revi- 
sion. Their account of revision is indirect: they describe contractions in terms of maximal 
non-implying sub-theories and they go on to characterize revisions, reducing revision to 
contraction via the Levi identity. In [Gro88], Grove gave a direct, semantic, characteri- 
zation of revision. The result of revising a theory K by a proposition a is determined by 
the models of a that are, individually, closest to the set, taken collectively, of all models 
of K. It thus uses a relation between individual models and sets of models. It is natural 
to seek to analyze such closeness in terms of a distance function between models. A first 
attempt was made by Becher in [Bec95], in view of comparing revision and update in a 
unified setting. Becher worked with not necessarily symmetric distances and showed that 
the AGM postulates hold in distance based revision, but gave no representation result. 
Independently, the authors presented, in [SLM96], a preliminary version of the results 
given in this paper. There, only the finite case of symmetric distances was treated. We 
deal here with the infinite case of symmetric distances and with the finite case of non- 
symmetric distances. We also provide here proofs and counter-examples. We present, 
first, our results on an abstract level, dealing with abstract sets and, then, specialize our 
results to the case of sets of models. In recent work (personal communication) Areces 
and Becher gave a representation result for the arbitrary, i.e. infinite and not necessarily 
symmetric case. Their conditions are different from ours, based on complete consistent 
theories, i.e. single models, and partly in an "existential" style, whereas our conditions 
are "universal" and more in the AGM style. We do not know whether there is an easy 
direct, i.e. not going via the semantics, proof of the equivalence of the Areces/Becher 
and our conditions. Thus, their approach is an alternative route, whose relation to our 
results is a subject of further research. The infinite case for non-symmetric distances with 
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conditions in our style is still open. 
1.1.2 Structure of this paper 

After a short motivation in Section 1.1, we present and discuss the AGM framework for 
revision in Section 1.2 and modify it slightly. Section 1.3 introduces pseudo-distances, 
which are distances weakened to the properties essential in our context. In particular, 
pseudo-distances are not necessarily symmetric. We formalize revision based on a (pseudo- 
) distance, and we show that the usual AGM properties hold for such distance-based 
revisions, at least in the finite case. An additional property (definability preservation) 
guarantees them to hold in the infinite case, too. Here, we also discuss some properties 
of distance-based revision going beyond the AGM postulates. 

Our main results are algebraic in nature, and work for arbitrary sets, not only for sets of 
models. The translation to logic is then straightforward. 

Section 2 presents the algebraic representation results, which describe the conditions which 
guarantee that a binary set operator | is representable by a pseudo-distance d, i.e. that 
A | B is the set of b e B d-closest to A, formally that A \ B = A \ d B := {b e B : 
3a b eAWe AW e B.d(a b ,b) < d(a',b')}. 

In Section 2.2, we treat the case of symmetric pseudo-distances, the result applies to sets 
of arbitrary cardinality. Note that this infinite case requires a limit condition: For non- 
empty sets A, B there is some b G B with closest distance (among the elements of B) to 
A. In Section 2.3, we treat the not necessarily symmetric case, but our result applies only 
to the finite situation. 

Section 3 finally translates the results of Section 2 to logic. We there describe the condi- 
tions which guarantee that a revision operator * can be represented by a pseudo-distance 
d between models, i.e. T*T' := Th(M(T) \ d M(T')) - where M(T) is the set of models 
of the theory T, and Th(X) the set of formulas valid in the set of models X. 
Analogously to the algebraic characterization, the logical representation results are for 
possibly infinite languages in the symmetric case (with some caveat about definability 
preservation) and for finite ones in the not necessarily symmetric case. 

1.2 Belief revision 

Intelligent agents must gather information about the world, elaborate theories about it and 
revise those theories in view of new information that, sometimes, contradicts the beliefs 
previously held. Belief revision is therefore a central topic in Knowledge Representation. 
It has been studied in different forms: numeric or symbolic, procedural or declarative, 
logical or probabilistic. 
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1.2.1 The AGM framework 



One of the most successful frameworks in which belief revision has been studied has 
been proposed by Alchourron, Gardenfors and Makinson, and is known as the AGM 
framework. It deals with operations of revision that revise a theory (the set of previous 
beliefs) by a formula (the new information). It proposes a set of rationality postulates 
that any reasonable revision should satisfy. A large number of researchers in AI have 
been attracted by and have developed this approach further: both in the abstract and by 
devising revision procedures that satisfy the AGM rationality postulates. 
Two remarks should be made immediately. First, the AGM framework presents rationality 
postulates for revision. It does not choose anyone specific revision among the many pos- 
sible revisions that satisfy those postulates. Those postulates are justified and defended 
by the authors, but, recently, some doubts have been expressed as to their desirability, 
at least for modeling updates, see [KM92] and, more importantly for us, it is not clear 
that the AGM postulates are all what one would like. A number of authors, in particular 
[FL94], [DP94], [Leh95], have in fact argued that one would expect some additional pos- 
tulates to hold. But the consideration of additional postulates has proved slippery and 
dangerous: the postulates proposed in [DP94] have been shown inconsistent in [Leh95] 
and have been modified in [DP97]. But this modification forces on us the rejection of 
one of the basic ontological commitments of the AGM framework, which brings us to a 
second remark. Secondly, one of the basic ontological commitments of the AGM approach 
is that what the agent is revising is a belief set. In other terms, epistemic states are belief 
sets. That this is the AGM position is clear from the formalism chosen: the left hand 
argument of the star revision operation is a belief set, from the motivation presented, and 
it is explicitly recognized in [Gr88], p. 47. 

Over the years, a large number of researchers have moved away from this identification, 
sometimes without recognizing it [BG93], [Bou93], [DP97], [Wil94], [NFPS95]. Recently, 
conclusive evidence has been put forward [Leh95], [FH96] to the effect that this identifi- 
cation of epistemic states to belief sets is not welcome in many AI applications. When 
iterated revisions are considered, it is reasonable to assume that the agent's epistemic 
state includes information related to its history of revisions and that all this history, not 
only the agent's current belief set, may influence future revisions. 

This paper keeps the AGM commitment to identifying epistemic states with belief sets, 
but proposes additional rationality postulates. Those additional postulates characterize 
exactly the revisions that are defined by pseudo-distances. They constrain revisions in 
the way they treat their left argument, the theory to be revised (in this respect the AGM 
postulates are extremely, probably excessively, liberal) and they imply highly non-trivial 
properties for iterated revisions. This paper therefore treats iterated revisions within 
the original AGM commitment to the identification of epistemic states and belief sets. 
Results related to the ideas of this paper may be found in [BGHPSW97]. Similar ideas 
in a context in which epistemic states are not belief sets may be found in [BLS99]. 
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This work provides a semantics for theory revision a la AGM, or for a sub-family of such 
revisions. It is the first such effort to describe semantically the whole revision operation * 
in a unified way. Previous attempts [Gro88], [GM88] describe the revision of each theory K 
by a different structure without any glue relating the different structures: sphere systems 
or epistemic entrenchment relations, corresponding to different K's. In this paper, the 
revisions of the different K's are obtained from the same pseudo-distance. A tight fit 
(coherence) between the revisions of different ICs seem crucial for a useful treatment of 
iterated revisions: it must be the same revision operation that executes the successive 
revisions for any interesting properties to appear. Our revisions are therefore defined by 
a polynomial (in the number of models considered) number of pseudo-distances instead 
of an exponential number of sphere systems or epistemic entrenchment relations (one for 
each theory K). 

Semantics based on a more or less abstract notion of distance is not a new idea in non- 
classical logics. The best known example is perhaps the Stalnaker/Lewis distance seman- 
tics for counterfactual conditionals, see e.g. [Lew73]. 

The AGM framework, defined in [AGM85], studies revision operations, denoted *, that 
operate on two arguments: a set K of formulas closed under logical deduction on the left 
and a formula a on the right. Thus K * a is the result of revising theory K by formula 
a, using revision method *. 

Notation 1.1 

Our base logic will be classical propositional logic, though our main results are purely 
algebraic in nature, and therefore carry over to other logics, too. 

By abuse of language, we call a language finite whose set of propositional variables is 
finite. 

A theory will be an arbitrary set of formulas, not necessarily deductively closed. 

We use the customary notation Cn(T) for the set of all logical consequences of a theory 

T. Cn(T, a) will stand for Cn(T U {«}). 

Con(T) will stand for: T is (classically) consistent, Con(T,T') abbreviates Con(TUT'). 
|= will be classical validity, and |= T <-> T' will abbreviate the obvious: |= T — > for all 
(f)' e T and |= V -> (j) for all G T. 

Given a propositional language C, Mc will be the set of its models. 

M(T) will be the models of a theory T (likewise M((f>) for a formula 0), and Th(X) the 

set of formulas valid in a set of models X. 

TVT' := {<f)V ft : <P ET, (j)' E T'}. 

V will be the power set operator. 

The logical connectives A and V and the set connectives n and U always have precedence 
over the revision and set operators * and | . 

Numbering of conditions: (| i) will number conditions common to the symmetric and the 
not necessarily symmetric set operators |, (| Si) and (| Ai) conditions for respectively the 
symmetric and the not necessarily symmetric set operator | . (*i), (*Si), (*Ai) will do 
the same for the theory revision operator *. 
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The original AGM rationality postulates are the following, for K a deductively closed set 
of formulas, and a, j3 formulas. 

Definition 1.1 

(K * 1) K * a is a deductively closed set of formulas. 

(K * 2) a G K * a. 

(K * 3) K * a C Cn(K,a). 

(K * 4) If £ K, then Cn(i^, a) C K * a. 

(A" * 5) If X * a is inconsistent then a is a logical contradiction. 

(AT * 6) If (= a <-> /3, then K*a = K*(3. 

(AT * 7) K*aAf3C Cn(K *a,P). 

(K * 8) If £ X * a, then Cn(AT * a, /?) C AT * a A /3. 

1.2.2 Modifications of the AGM framework 

We prefer to modify slightly the original AGM formalism on two accounts. First, it seems 
to us that the difference required in the types of the two arguments of a revision: the left 
argument being a theory and the right argument being a formula is not founded. The 
lack of symmetry is twofold: the left-hand argument, being a theory, may be inherently 
infinite and not representable by a single formula while the right-hand argument is always 
a single formula, but also the left-hand argument is not an arbitrary set of formulas, 
but closed under logical implication, whereas the right-hand argument is not deductively 
closed, thus requiring Postulate A'* 6 to assert invariance under logical equivalence. There 
is no serious reason for this lack of symmetry. We shall therefore prefer a formalism that 
is symmetric in both arguments. 

Our results for symmetric pseudo-distances are valid for infinite sets, our results for not 
necessarily symmetric pseudo-distances have been proved only for finite sets - where sets 
are to be understood as sets of models. The latter are thus proved for languages based on 
a finite set of propositional variables only. We therefore choose a formalism in which both 
arguments of the revision operator are theories, which, in the not necessarily symmetric 
case, will be assumed to be equivalent to single formulas. We thus look at T * T', the 
theory that is the result of revising theory T by the new information represented by theory 
T. 

Secondly, in the AGM formalism, each one of the theory K and the formula a may 
be inconsistent. There is no harm in doing so, but the interesting revisions are always 
revisions of consistent theories by consistent formulas and the consideration of inconsistent 
arguments makes the treatment unnecessarily clumsy. Therefore, we shall only revise 
consistent theories by consistent theories, and assume both arguments are consistent. 
The AGM postulates may now be rewritten in the following way. We rewrite K * 3 and 
K * 4 in one single postulate, (*3), and similarly for K * 7 and K * 8, in (*4). K * 1 and 
K * 5 are summarized in our general prerequisite and (*1). 
Remember that T, T', T", S, S' are now arbitrary consistent theories. 
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Definition 1.2 

(*0) If h T <-> 5, |= T" <-> 5', then T * V = S * S', 
(*1) T * T' is a consistent, deductively closed theory, 
(*2) T'CT* T', 

(*3) If T U T' is consistent, then T * T' = Cn(T U T'), 

(*4) If T * T' is consistent with T", then T * (T U T") = Cn((T * T) U T"). 

1.3 Revision based on pseudo-distances 
1.3.1 Pseudo-distances 

We will base our semantics for revision on pseudo-distances between models. Pseudo- 
distances differ from distances in that their values are not necessarily reals, no addition 
of values has to be defined, and symmetry need not hold. All we need is a totally ordered 
set of values. If there is a minimal element such that d(x, y) = iff x = y, we say that 
d respects identity. Pseudo-distances which do not respect identity have their interest in 
situations where staying the same requires effort. 
We first recollect: 

Definition 1.3 

A binary relation < on X is a preorder, iff < is reflexive and transitive. If < is in addition 
total, i.e. iff Vx, yEXx<y or y<x, then < is a total preorder. 

A binary relation < on X is a total order, iff < is transitive, irreflexive, i.e. x -jt x for all 
x G X, and for all x, y G X x < y or y < x or x = y. 

Note 1.1: 

If < is a total preorder on X, pa the corresponding equivalence relation defined by x ~ y 
iff x < y and y < x, [x] the w -equivalence class of x, and we define [x] < [y] iff x < y, 
but not y < x, then < is a total order on {[x] : x E X}. 

Definition 1.4 

d : U x U — > Z is called a pseudo-distance on U iff (dl) holds: 
(dl) Z is totally ordered by a relation < . 

If, in addition, Z has a < -smallest element 0, and (d2) holds, we say that d respects 
identity: 

(d2) d(a, b) = iff a = b. 

If, in addition, (d3) holds, then d is called symmetric: 
(d3) d(a, b) = d(b, a). 
(For any a, b G U.) 
Let < stand for < U =. 
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Note that we can force the triangle inequality to hold trivially (if we can choose the values 
in the real numbers): It suffices to choose the values in the set {0} U [0.5, 1], i.e. in the 
interval from 0.5 to 1, or as 0. 

Recall that our main representation results are purely algebraic, and apply to arbitrary 
sets U, which need not necessarily be sets of models. Intuitively however, U is to be 
understood as the set of models for some language C, and the distance from m to n, 
d(m, n) represents the "cost" or the "difficulty" of a change from the situation represented 
by m to the situation represented by n. M. Dalai [Dal88] has considered one such distance: 
the distance between two propositional worlds is the number of atomic propositions on 
which they differ, i.e., the Hamming distance between worlds considered as binary k- 
dimensional vectors, where k is the number of atomic propositional variables. A. Borgida 
[Bor85] considered a similar but different distance, based on set inclusion. His distances 
are not totally ordered and therefore the framework presented here does not fit his work. 
Another example of such a distance is the trivial distance: d(m, n) is if m = n and 1 
otherwise. 

Both those distances satisfy the triangular inequality. In applications dealing with rea- 
soning about actions and change, one may want to consider the distance between two 
models to represent how difficult, or unexpected, the transition is. In such 
natural pseudo-distance may well not be symmetric. 
We give the formal definition of the elements of B d-closest to A: 

Definition 1.5 

Given a pseudo-distance d : U x U — > Z, let for A, B C U A \ d B := {b E B : 3a b E 
A\/a' E AW E B.d{a b , b) < d(a', b')}. 

Definition 1.5 may be presented in a slightly different light. Put (a, b) < (a', b') iff 
d(a,b) < d(a',b'). Let min < (A x B) be the set of all minimal elements (under <) of 
the set Ax B. Then, A \ d B is nothing else than the right projection (on B) of A x B. 
Thus, A \ d B is the subset of B consisting of all b E B that are closest to A. Note that, 
if A or B is infinite, A \ d B may be empty, even if A and B are not empty. A condition 
assuring non-emptiness will be imposed when necessary. 

The aim of Section 2 of this article is to characterize those operators |: V(U) x V(U) — > 
V(U), for which there is a pseudo-distance d, such that A \ B — A \ d B. We call such | 
representable: 

Definition 1.6 

An operation | is representable iff there is a pseudo-distance d : U x U — > Z such that 
(1) A | B = A \ d B := {b e B : 3a b e AW e AW E B(d(a b , b) < d(a' , b'))}. 

1.3.2 Revision based on pseudo-distances 

The representation results of [AGM95] , the semantics of Grove [Gro88] and the very close 
connection with the rational relations of [LM92], showed in [GM94], all leave essentially 
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unanswered the question of the nature of the dependence of the revision T * V on its 
left argument, T. Since we, like most researchers in Artificial Intelligence, are mostly- 
interested in iterated revisions, proper understanding, and semantics, for this dependence 
is crucial. The purpose of this paper is to answer the question by proposing a suitable 
semantics. We completely characterize the semantics by a set of postulates. We do not 
claim that the semantics proposed are the most general ones, we present one family of 
reasonable semantics, based on pseudo-distances between models. 

The following is the central definition, it describes the way a revision * d is attached to a 
pseudo-distance d on the set of models. 

Definition 1.7 

T* d V = Th(M(T) \d M{T')). 

* is called representable iff there is a pseudo-distance d on the set of models s.t. T *T' = 
Th(M(T) \ d M(T')). 

The main goal of this work is to characterize the properties, i.e., rationality postulates 
satisfied by revisions representable by pseudo-distances. 

1.3.3 Revision based on pseudo-distances and the AGM postulates 

The AGM postulates hold for revision based on pseudo-distances in the finite 

case 

Definition 1.8 

An operation | on the sets of models of some logic is called definability preserving iff 
M(T) | M(T') is again the set of models of some theory S for all theories T, T' . 

Abstractly, definability preservation strongly couples proof theory and semantics. To 
obtain the same kind of results without definability preservation, we would have to allow 
a "decoupling" on a "small" set of exceptions. This is illustrated e.g. by the results in 
[Sch97] for the definability preservation case, and in [Sch98] for the unrestricted case of 
representation results for preferential structures. A similar problem arose already in a 
finite situation in [ALS98] in the context of partial and total orders, and is treated there 
by an inductive process. 

A first easy result is: any such revision defined for a finite language satisfies the AGM 

postulates (*0) — (*4), if d respects identity. (We use | to abbreviate \ d .) 

The same proof shows that the AGM postulates also hold in the infinite case, if the 

operation | is definability preserving, and if we impose a limit condition for postulate 

(*!)• 

(*0) is evident, as we work with models. 

(*1) holds in the finite case, we will impose it, i.e. a limit condition, in the infinite case. 
(*2) trivial by definition. 
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(*3) this holds, as d(a, a) is minimal for all a, by respect of identity. 
(*4) Note that M(S U S') = M(S) n M(S'), and that M(S * S') = M(S) \ M(S'). By 
prerequisite, M(T * T') n M(T") ^ 0, so (M(T) | M(T')) n M(T") ^ 0. Let A := M(T), 
5 := M(T'), C := M(T"). " C": Let 6 G A | (5 n C). By prerequisite, there is b' G (A I 
5) n C. Thus > d(A,BD C) = d(A,b). As b G B, b G A | B, but 6 G C, too. 

" D" : Let 6' G (A | B) n C. Thus 6') = 5) < d(A, B n C), so by 6' G B n C 
b' e A \ (B (1 C). We conclude M(T) | (M(T') n M{T")) = (M(T) | M(T')) n M(T"), 
thus that T*(T'U T") = Cn((T * T ) U T"). 

The AGM postulate (*4) may fail in the infinite not definability preserving 
case 

The importance of definability preservation is illustrated by the following example, which 
shows that already the AGM properties may fail when the distance between models does 
not preserve definability. Essentially the same example will show in Section 3 (Example 
3.1 there) that our Loop Condition (*S1) may fail when the distance is not definability 
preserving. We see here that this is not related to our stronger conditions, but happens 
already in the general AGM framework. 

Example 1.1 

Consider an infinite propositional language C. 

Let T, Ti, T 2 be complete (consistent) theories, T' a theory with infinitely many models, 
M(T) = {m}, M(Ti) = {mi}, M(T 2 ) = {m 2 }, M(T') = X U {m 1? m 2 }, M(T") = 
{mi,m 2 }. Assume further Th(X) = T', so X is not definable by a theory. 
Arrange the models of C in the real plane s.t. all x G X have the same distance < 2 (in 
the real plane) from to, to 2 has distance 2 from to, and toi has distance 3 from to. 
(See Figure 1.1.) 

Then M(T) | M(T') = X, but T * T = T', so T * V is consistent with T", and 
Cn((T * T) U T") = T". But T' U T" = T", and T * (T' U T") = T 2 ^ T". □ 



AGM revisions are not all definable by pseudo-distances 

But any revision defined by a pseudo-distance d also satisfies some properties that do not 
follow from the AGM postulates. We note again | for |^ . 

Consider, for example, the set C = (Ai U A 2 ) \ B, where A { and B are finite sets. d(A, B) 
will be min{d(a, b) : a G A,b G B}. 

If d(A u B) < d(A 2 , B), then C = A x \ B. If d(A 2 , B) < d(A u B), we have C = A 2 \ B. If 
d(Ai,S) = d(A 2 ,S), then we have C = (A\ \ B) U (A 2 | B). It follows that any revision 
defined by a pseudo-distance satisfies (for a finite language): (a± V a 2 ) * (3 is equal to 
(cti * pi) fl (a 2 * to cti * /3, or to a 2 * /3. 
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Figure 1.1 
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This property does not follow from the AGM postulates, as will be shown below, but 
seems a very natural property. Indeed, when revising a disjunction a.\ V a 2 by a formula 
f3, there are two possibilities. First, it may be the case that our indecision concerning 
cci or a 2 persists after the revision, and, in this case, the revised theory is naturally the 
disjunction of the revisions. But it may also be the case that the new information (3 makes 
us revise backwards and conclude that it must be the case that ot\ or, respectively, a 2 
was (before the new information) the better theory and, in this case, the revised theory 
should be a± * f3 or a 2 * (3- Notice that this last property of revisions generated by pseudo- 
distances is the left argument analogue of AGM's Ventilation Principle which concerns 
the argument on the right. The Ventilation Principle follows from the AGM postulates 
and states that: a * (f3\ V /3 2 ) is equal to (a * f3i) n (a * /3 2 ), to a * f3\ or to a * fa- 
One can conclude that any revision defined by a pseudo-distance satisfies the following 
properties, that deal with iterated revisions: 
if 5 G (K * a) * 7 and 5 G (K * (3) * 7, then 5 G (K *(aV (3)) * 7 
and 

if 5 G (K * (a V (3)) * 7, then, either 5 G (K * a) * 7 or 5 G (K * (3) * 7. 
Those properties seem intuitively right. If after any one of two sequences of revisions 
that differ only at step i (step i being a in one case and (3 in the other), one would 
conclude that 5 holds, then one should conclude 5 after the sequence of revisions that 
differ from the two revisions only in that step i is a revision by the disjunction a V f3, 
since knowing which of a or f3 is true cannot be crucial. This property is an analogue 
for the left argument of the Or property of [KLM90] . Similarly, if one concludes S from a 
revision by a disjunction, one should conclude it from at least one of the disjuncts. This 
property is an analogue for the left argument of the Disjunctive Rationality property of 
[KLM90], studied in [Fre93]. It is easy to see that the property (CI) of Darwiche and 
Pearl [DP94], i.e., (K * a) * (a A (3) = K * (a A (3) is not satisfied by all revisions defined 
by pseudo-distances. Section 2 will precisely characterize those revisions that are defined 
by pseudo-distances. 
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Notice that in each of the AGM postulates, the left-hand side argument of the revision 
operation (*) is the same all along: all revisions have the form K * . Since, as has been 
shown above, every revision defined by a pseudo-distance satisfies the AGM postulates, 
if, for each theory K we define K* by some pseudo-distance, then the revision defined will 
satisfy the AGM postulates, even if we use different pseudo-distances for different K's. 
Consider, for a simple example, 4 points in the real plane, a, b, c, d, to be interpreted 
as the models of a propositional language of two variables. Let a have the coordinates 
(0,1), b (0,-1), c (1,0), d (2,0), and define by the natural distance the revisions with any 
1^0 except for X := {a, b} on the left hand side. As seen above, they will satisfy the 
AGM postulates. To define the revisions with {a, b} on the left hand side, interchange 
the positions of c and d. This, too, satisfies the AGM postulates. As the AGM postulates 
say nothing about coherence between different ICs, all these revisions together satisfy the 
AGM postulates. 

But we will then have {a} \ {c,d} = {b} \ {c,d} = {c}, but {a, b} \ {c,d} = {d}, so such 
a system of revisions cannot be defined by a pseudo-distance. 

2 The algebraic representation results 
2.1 Introduction 

First, a generalized abstract nonsense result. This result is certainly well-known and we 
claim no priority. It will be used repeatedly below to extend a relation R to a relation S. 
The equivalence classes under S will be used to define the abstract distances. 

Lemma 2.1 

Given a set X and a binary relation R on X, there exists a total preorder S on X that 

extends R such that 

(2) Vx, y E X(xSy, ySx => xR*y) 

where R* is the reflexive and transitive closure of R. 

Proof: 

Define x = y iff xR*y and yR*x. The relation = is an equivalence relation. Let [x] be 
the equivalence class of x under =. Define [x] ^ [y] iff xR*y. The definition of ^ does 
not depend on the representatives x and y chosen. The relation ^ on equivalence classes 
is a partial order: reflexive, antisymmetric and transitive. A partial order may always 
be extended to a total order. Let < be any total order on these equivalence classes that 
extends Define xSy iff [x] < [y\. The relation S is total (since < is total) and transitive 
(since < is transitive): it is a total preorder. It extends R by the definition of -< and the 
fact that < extends ■<. Let us show that it satisfies Equation (2) of Lemma 2.1. Suppose 
xSy and ySx. We have [x] < [y] and [y] < [x] and therefore [x] = [y] by antisymmetry ( 
< is an order relation). Therefore x = y and xR*y. □ 



12 



The algebraic representation results we are going to demonstrate in this Section 2 are 
independent of logic, and work for arbitrary sets U, not only for sets of models. On the 
other hand, if the (propositional) language C is defined from infinitely many propositional 
variables, not all sets of models are definable by a theory: There are X C Mc s.t. there is 
no T with X = M(T). Moreover, we will consider only consistent theories. This motivates 
the following: 

Let U ^ 0, and let y C V(U) contain all singletons, be closed under finite non-empty 
fl and finite U, G" y and consider an operation |: y x y — > y. (For our representation 
results, finite fl suffices.) 

We are looking for a characterization of representable operators. We first characterize 
those operations | which can be represented by a symmetric pseudo-distance in Section 2.2, 
and then those representable by a not necessarily symmetric pseudo-distance in Section 
2.3. 

Notation 2.1 

For a G U, X G y a \ X will stand for {a} \ X etc. 

2.2 The result for symmetric pseudo-distances 

We work here with possibly infinite, but nonempty U. 

Both Example 2.1 and Example 2.2 show that revision operators are relatively coarse 
instruments to investigate distances. The same revision operation can be based on many 
different distances. Consequently, in the construction of the distance from the revision 
operation, one still has a lot of freedom left. Example 2.2 will show that, in the case one 
does not require symmetric distances, the freedom is even greater. The reader should 
note that the situation described in Example 2.2 corresponds to the remark in the proof 
of Proposition 2.5, that the constructed distance d does not necessarily satisfy d(A, B) = 
min{d(a,B) : a G A}, i.e., may behave strangely on the left hand side. But even when 
the pseudo-distance is a real distance, the resulting revision operator \ d does not always 
permit reconstructing the relations of the distances. 

Distances with common start (or end, by symmetry) can always be compared by looking 

at the result of revision: 

a \d {b, b'} = b iff d(a, b) < d(a, b'), 

a \d {b, b'} = b' iff d(a, b) > d(a, b'), 

a \ d {b, b'} = {b, b'} iff d(a, b) = d(a, b'). 

This is not the case with arbitrary distances d(x,y) and d(a, b), as the following example 
will show. 

Example 2.1 

We work in the real plane, with the standard distance, the angles have 120 degrees, a' is 
closer to y than x is to y, a is closer to b than x is to y, but a' is farther away from b' 
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Figure 2.1 




than x is from y. Similarly for b,b'. But we cannot distinguish the situation {a, b, x, y} 
and the situation {a',b',x, y} through \d . (See Figure 2.1.) 

Proof: 

Seen from a, the distances are in that order: y, b, x. 
Seen from a', the distances are in that order: y, b', x. 
Seen from b, the distances are in that order: y, a, x. 
Seen from b', the distances are in that order: y, a', x. 
Seen from y, the distances are in that order: a/b,x. 
Seen from y, the distances are in that order: a'/b',x. 
Seen from x, the distances are in that order: y,a/b. 
Seen from x, the distances are in that order: y, a'/b'. 

Thus, any c\&C will be the same in both situations (with a interchanged with a', b with 
b'). The same holds for any X \ d C where X has two elements. 

Thus, any C \d D will be the same in both situations, when we interchange a with a', and 
b with b'. So we cannot determine by \d whether d(x,y) > d(a,b) or not. □ 



Proposition 2.2 



14 



Let U ^ 0, y C P(C/) be closed under finite non-empty n and finite U, ^ J 7 - 
Let A, B, Xi E y. 

Let | : y x y — > and consider the conditions 
(| 1) A | S C S 

(|2)Ans^0->A|s = Ans 

(I 51) (Loop): (x x | (x ux 2 ))nx ^ 0, (x 2 1 (x 1 ux 3 ))nx 1 ^ 0, (x 3 1 (x 2 ux 4 ))nx 2 ^ 

0, . . . . (X k I (X fc _! U X )) n X fe _! ^ imply (X | (X* U X : )) nl^0. 

(a) I is representable by a symmetric pseudo-distance d : U x U — > Z iff | satisfies (| 1) 
and (| 51). 

(b) | is representable by an identity-respecting symmetric pseudo-distance d : U x U — > Z 
iff | satisfies (| 1), (| 2), and (| 51). 

Note that (| 1) corresponds to (*2), (| 2) to (*3), (*0) will hold trivially (*1) holds 
by definition of y and |, (*4) will be a consequence of representation. (| 51) corre- 
sponds to: d(Xi,X ) < d(X 1: X 2 ), d(X 2 ,X 1 ) < d(X 2 ,X 3 ), d(X 3 ,X 2 ) < d(X 3 ,X 4 ) < 
...< d(X k , X fc _i) < d(X k , X ) -> d(X , Xi) < d(X , X fc ), and, by symmetry, d(X , X x ) < 
d(X 1: X 2 ) <...< d(X , X k ) — > <i(X , Xi) < d(X , X k ), i.e. transitivity of <, or to absence 
of loops involving <. 

We first show the hard direction via a number of auxiliary definitions and lemmas (up to 
Fact 2.4). We assume all A,B etc. to be in y, and (| 1), (| 51) to hold from now on. 
We first define a precursor || A, B || to the pseudo-distance between A and B, and a 
relation < on these || A, B ||' s. We then prove some elementary facts about || • • • || and < 
in Fact 2.3. We extend < to a total preorder 5 using Lemma 2.1, the pseudo-distances will 
be S-equivalence classes of the || A, B ||' s. It remains to show that the revision operation 
\d defined by this pseudo-distance is the same as the operation we started with, this is 
shown in Fact 2.4. 

Definition 2.1 

Set || A,B \\<\\ A, B' \\ iff (A | B U B') n B ^ 0, 

set || A,B ||<|| A, B' \\ iff || A, B ||<|| A, B' ||, but not || A, B \\>\\ A, B' || . 

|| A, B || is to be read as the pseudo-distance between A and B or between B and A. 
Recall that the pseudo-distance will be symmetric, so || ... || operates on the unordered 
pair {A, B}. Note that A \ B ^ 0, by definition of the function | . 

Let <* be the transitive closure of <, we write also <* if it involves < . Write || a, B \\ for 
|| {a}, B || etc. 

The loop condition reads in the || -notation as follows: ij X ,Xi \\<\\ X 2 ,Xi \\<\\ 
X 2 , X 3 \\<\\ X 4 , X 3 || < ... <|| X k , X k _i ||<|| Xk, X ii — > || X , Xi ||<|| X , X k || 

Fact 2.3 

(1) || A, B H^ll A, B' || iff || A, B' \\<\\ A, B || 

(2) B' C B -> || A, B \\<\\ A, B' \\ 
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(3) There are no cycles of the forms || A, B \\<\\ A, B' ||< ... <|| A, B" \\<\\ A, B || or 
|| A, B \\<\\ A,B' || < ... <|| A",B \\<\\ A, B || involving < . (The difference between 
the two cycles is that the first contains possibly only variations on one side, of the form 
II A, B" ||<|| A, B \\<\\ A, B' ||, the second one possibly only alternating variations, of the 
form || A", B \\<\\ A, B \\<\\ A, B' || .) 

(4) b e A | B -> || A,b \\<\\ A, B || 

(5) b £ A | B, b e B -> || A, B \\<\\ A, b \\ 

(6) || A,b \\<*\\ A,B ||, b e B -> b e A \ B 

(7) b e A \ B, a b e b \ A, a b E A' C A implies (a) b e A' \ B, (b) A' \ B C A \ B. 

(8) b E A \ B, a b E b | A, a' E A, b' e B -> || a 6 , 6 ||<*|| a',b' \\ 

(9) b E B, b £ A \ B, b' e A \ B, a b , e b' \ A, a E A. Then || a v ,V \\<*\\ a,b\\ . 
If (| 2) holds, then 

(10) Af]B ^ -> || A, ^ ||<*|| || 

(11) An 5 ^ 0, A' nB' = -»• || A ^ ||<*|| A', ^' || 

Proof: 

(I) and (2) are trivial. 

(3) We prove both variants simultaneously. Case 1, length of cycle — 1 : || A, B ||<|| 
A, B ||, so (A | B) n .B = 0, contradiction. Case 2: length > 1 : Let e.g. || A , _B ||<|| 
A)> B\ || < . . . <|| Aq, Bk \\<\\ Aq, Bo II be such a cycle. If the cycle is not yet in the form 
of the loop condition, we can build a loop as in the loop condition by repeating elements, 
if necessary. E.g.: || A , B ||<|| A G ,Bi \\<\\ A , B 2 || can be transformed to || A , B \\<\\ 

\\<by (2)|| Ab-Bi ||<|| A ,B 2 || . By Loop, we conclude || A , B \\<\\ A ,B k ||, 
contradicting (1). 

(4) and (5) are trivial. 

(6) b £ A | B (5) || A, B ||<|| A,b ||, contradicting || A, b \\<*\\ A, B || by (3). 

(7) (a) By (6), it suffices to show that || A',b \\<*\\ A',B \\ . But || A',b \\< by (2) || 
a b,b \\<* {4) twice \\ A, B ||< 62/ (2) || A',B || . (b) Let V e A' \ B, we show b' e A | B. By 
(6), it suffices to show || A,b' \\<*\\ A, B ||: || A, b' ||< (2) || A', b' ||< (4) || A', 5 ||<^ 2) toice || 

ll<(4) tocell A 5 II • 

(8) || a b ,b \\<*\\ A, B \\<*\\ a',b' || . 

(9) || a b ,,V \\<* {4) twl J A, B ||< (5) || A,b ||< (2) || a, 6 || . 

(10) || A, 5 ||<|| A, BUB' ||, as (A | BUB') nB ^ 0, by An5 C A \ BUB'. Likewise 
|| A, BUB' \\<\\ A U A', BUB' || . Moreover, || All A',B U B' \\<\\ A',B' \\ by (2). 

(II) We show first that A f] B ^ 0, A f] B' = implies || A, B ||<|| A, B' ||: 
A j B U B' = A n (B U B') = An B C A, so (A \ B U B') n B' = 0. Thus, 
II A,S||<^ (10) || A', A' ||<|| A',B' ||.D 



We define: 
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Definition 2.2 

Let S, by Lemma 2.1, be a total preorder on {|| A, B ||: A, B G 3^} extending < s.t. 
|| A,B \\ S || A', B' || and || A', B' \\ S \\ A, B || imply || A, B \\<*\\ A',B' \\ . 
Let || A,B |H| A', 5' || iff || A,B \\ S || A', B' || and || A',B' \\ S \\ A,B ||, and 
[|| A,B ||] be the set of ^-equivalence classes and define [|| A, B \\] < [|| A',B' ||] iff 
|| A,B\\S || A', B' || but not || A', B' \\ S\\A,B\\. This is a total order on {[|| A, B ||] : 
A, Be y}. Define d(A, B) := [\\ A, B ||] for A,B ey. 

If (| 2) holds, let := [|| A, A ||] for any A. This is then well-defined by Fact 2.3, (10). 
Note that by abuse of notation, we use < also between equivalence classes. 

Fact 2.4 

(1) The restriction to singletons of d as just defined is a symmetric pseudo-distance; if 
(| 2) holds, then d respects identity. 

(2) A\B = A\ d B. ~ 

Proof: 

(1) 

(dl) Trivial. If [|| b, c \\] < [|| a, a ||], then || b, c \\<*\\ a, a ||, but not || a, a ||<*|| b, c ||, 
contradicting Fact 2.3, (10). 

(d2) d(a,b) = d(a,a) iff || a, b \\<*\\ a, a || iff a = b by Fact 2.3, (10) and (11). 

(d3) [|| a, b ||] < [|| b, a ||] is trivial. 

(2) 

" C": Let b G A | B. Then there is a b G b \ A. By Fact 2.3, (8), || a b ,b \\<*\\ a',b' \\ for all 

a' G A,b' G B. So d(a b , b) < d(a', b') for all a' G A, b' G B and b G A \ d B. 

" D": Let 6 G 5, 6 G" A | B. Take 6' G A | 5, a 6 / G b' \ A, a G A. Then by Fact 2.3, (9) 

|| a b r, b' \\<*\\ a,b \\, so b ^ A \ d B. 

□ 



It remains to show the easy direction of Proposition 2.2. 

All conditions but (| SI) are trivial. Define for two sets A,B ^ I d(A, B) := d(a b ,b), 
where b G A \ d B, and a b G b \ d A. Then d(A, B) = d(B, A) by d(a, b) = d(b, a) for all a, b. 
Loop amounts thus to d(Xi,Xo) < . . . < rf(Xfe,Xo) — > rf(Xo,Xi) < rf(Xo,Xfe), which is 
now obvious. □ (Proposition 2.2) 



2.3 The result for not necessarily symmetric pseudo-distances 

Note that we work here with finite U only, y will be V(U) — {0}. 
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Figure 2.2 
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We first give an Example, which illustrates the expressive weakness of a not necessarily 
symmetric distance. 

Example 2.2 

This example, illustrated in Figure 2.2, shows that we cannot find out, in the non sym- 
metric case, which of the elements a, a' is closest to the the set {b, b'} (we look from a/a' 
to {b,b'}). In the first case, it is a', in the second case a. Yet all results about revision 
stay the same. 

In the first case, we can take the "road" in both directions, in the second case, we have to 
follow the arrows. (For simplicity, the vertical parts have length 0.) Otherwise, distances 
are as indicated by the numbers, so e.g. in the second case, from a' to a it is 1, from a to 
a' 1.2. For any X,Y C {a, a', b, b'} X | Y will be the same in both cases, but, seen from a 
or a', the distance to {b, b'} is closer from a' in the first case, closer from a in the second. 

The characterization of the not necessarily symmetric case presented in the following 
perhaps does not seem very elegant at first sight, but it is straightforward and very 
useful in the search for more elegant characterizations of similar operations. For our 
characterization a definition is necessary. It associates a binary relation between pairs 
of non-empty subsets of U : intuitively, (A, B)R\(A', B') may be understood as meaning 
that the revision | requires the pseudo-distance between A and B to be smaller than or 
equal to that between A' and B'. The main idea of the representation theorem is to define 
a relation (the relation R\ of Definition 2.3) that describes all inequalities we know must 
hold between pseudo-distances, and require that the consequences of those inequalities 
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are upheld (conditions (| A2) and (| A3) of Proposition 2.5). The proof of the theorem 
shows that Definition 2.3 was comprehensive enough. 

Definition 2.3 

Given an operation |, one defines a relation R\ on pairs of non-empty subsets of U by: 
(A, B)R\{A', B') iff one of the following two cases obtains: 

(1) A = A' and (A | B U B') n B ^ 0, 

(2) B = B' and (A U A' \ B) ^ (A' | £), 

If the pseudo-distance is to respect identity, we also consider a third case: 

(3) AHB ^ 0. 

Definition 2.3 can be written as: 

(1) (A|BUB')n5^0^ (A, B)R\(A, B'), 

(2) (A U A' | B) ^ (A' | £) 

(3) AHB ^0 (A,B)R\{A',B'). 

In the sequel we shall write R instead of R\ . As usual, we shall denote by R* the reflexive 
and transitive closure of R. 

Notice also that we do not require that the pseudo-distance between A and B be less or 
equal than that between A 1 and B' if A' C A and B' C B, as one could expect. In fact, 
a theorem similar to Proposition 2.5 below may be proved with a definition of R that 
includes a fourth case: (A, B)R(A', B') if A' C A and _B' C B, and its proof is slightly 
easier, but we prefer to prove the stronger theorem. Notice also that, in order to avoid 
the fourth case just mentioned, the conclusion of case (2) is (A, B)R\(A', B), and not the 
seemingly stronger but in fact weaker in the absence of the fourth case mentioned above: 
(A, B)R\(A U A', B). 

We may now formulate our main technical result. Condition (| Al) expresses a property 
of Disjunctive Rationality ([KLM90], [LM92], [Fre93]) for the left-hand-side argument of 
the operation | . 

Proposition 2.5 

Consider the following conditions: 
(| 1) (A | B) C B, 

(| Al) (AUA'\B)C(A\B)U {A' | B), 

(| A2) If (A, B)R*(A, B'), then (A | B) C (A \ B U B'), 

(| A3) If (A, B)R*(A', B), then (A | B) C (A U A' \ B), 

(| 2) If A n B ^ 0, then A | B = An B, 

(| A4) If (A, J B)i?*(A, 5') and A'nB'^ 0, then A n B ^ 0. 

(a) An operation \: y x y —> y is representable by a pseudo-distance iff it satisfies the 
conditions (| 1), (| Al) — (| A3) for any non-empty sets A, B C U, where the relation R is 
generated by cases (1) and (2) of Definition 2.3. 

(b) An operation | : y x y — > y is representable by an identity-respecting pseudo-distance 
iff it satisfies the conditions (| 1), (| 2), (| Al) — (| A4) for any non-empty sets A,BCU, 
where the relation R is generated by cases (1) - (3) of Definition 2.3. 
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Proof: 

First, we shall deal with the soundness part of the theorem, and then with the more 
challenging completeness part. We prove (a) and (b) together. 

Suppose, then, that | is representable by a pseudo-distance. The function d acts on pairs 
of elements of U, and it may be extended to a function on pairs of non-empty subsets of 
U in the usual way: d(A, B) = min{d(a, b) : a G A,b G B}. 

Then Equation (1) in Definition 1.6, defining representability, may be written as: 
(3) A | B = {be B\d(A,b) = d(A,B)}. 

We must now show that the conditions of Proposition 2.5 hold. 
Condition (| 1) is obvious. 

Condition (j Al) holds since d(A U A', B) = min{d(A, B) , d(A' , B)} . 

Considering Definition 1.6 and the different cases of Definition 2.3, we shall see that 

(A, B)R(A', B') implies d(A,B) < d(A',B'). Case 1 is obvious. Let us treat case (2). 

Clearly d(AuA', B) = min{d(A', B), d(A, B)}. We shall show that if d(A' , B) < d(A, B), 

then AUA'\B = A'\B. Suppose d(A' , B) < d(A, B). Then, d(A U A', B) = d(A', B) < 

d(A, B). Therefore AUA' \ B — A' \ B. Case 2 has been taken care of. If d respects identity, 

Case 3 is obvious. We conclude that (A, B)R*(A', B') implies that d(A,B) < d(A',B'). 

Condition (| A2) holds because d(A,B) < d(A, B') implies d(A, B U B') = d(A, B). 

Condition (| A3) holds because d(A, B) < d(A', B) implies d(A U A', B) = d{A, B). 

It remains to show that (| 2) and (| AA) follow from respect of identity: 

Condition (| 2) holds because A | B = {b e B : d(A,b) = d(A, B) = 0} if A n B ^ 0. 

Condition (| AA) holds because d(A, B) < d(A', B') = implies d(A, B) = 0. 

For the other direction, we work, unless stated otherwise, in the base situation, i.e. where 

at least conditions (| 1), (| Al) — (| A3) hold, and the relation R is generated by at least 

cases (1) and (2) of Definition 2.3. 

In our proof, a number of lemmas will be needed. These lemmas will be presented when 
needed, and their proof inserted in the midst of the proof of Proposition 2.5. Again, 
we first extend the relation R on pairs (A, B) to a total preorder S using Lemma 2.1, 
and use the S-equivalence classes as pseudo-distances. Recall that the d thus defined will 
behave nicely on the right hand side, but not necessarily on the left hand side: d(A, B) = 
min{d(A,b) : b G B} will hold, but not necessarily d(A, B) = min{d(a, B) : a G A}. 
Again, it remains to show that the revision operation \d defined by this pseudo-distance 
is the same as the operation we started with, this is done in the rest of the proof. 
First, a simple result, analogous to the Or rule of [KLM90]. 

Lemma 2.6 

For any sets A, A', B, (A | B) n (A' | B) C A U A' \ B. 
Proof: 

Without loss of generality we may assume that A \ B ^ A U A' \ B. Then (A', B)R(A, B) 
by case (2) of Definition 2.3, and A' \ B C A U A' \ B by condition (| A3) of Proposition 
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2.5. □ 



We consider the set y x y and the binary relation R on this set defined from | by Definition 
2.3. By Lemma 2.1, R may be extended to a total preorder S satisfying: 

(4) xSy, ySx =>• xR*y. 

Let Z be the totally ordered set of equivalence classes of y x y defined by the total 
preorder S. The function d sends a pair of subsets A, B to its equivalence class under S. 
We shall define d(a, b) as d({a}, {b}). Notice that we have first defined a pseudo-distance 
between subsets of U, and then a pseudo-distance between elements of U. It is only the 
pseudo-distance between elements that is required by the definition of representability. 
The pseudo-distance between subsets just defined must be used with caution because it 
does not satisfy the property: d(A,B) = min{d(a,b) : a G A,b G B}. It satisfies half of 
it, as stated in Lemma 2.7 below. 

Clearly, (A, B)R(A', B') implies d(A,B) < d(A',B'). Equation (4) also implies that if 
d(A,B) =d(A',B'), then (A, B)R*(A', B'). 

The following argument prepares respect of identity. Suppose that | satisfies (| 2) and 
(| AA) too, and that R was defined including case (3) of Definition 2.3. Defining := 
d(A, A) for any A G y, we see that (a) is well-defined: By definition, (A, A)R(B, B) 
for any A,Bey. (b) there is no d(B,C) < : By definition again, (A, A)R(B,C). (c) 
d(A, B) = iff A n 5 ^ : Af]B ^ implies (A, B)R(A, A) , so d(A, B) = 0. d(A, B) = 
implies (A, B)S(A, A)S(A, B), so (A, B)R*(A, A), so A n B ^ by (| AA). 
The next lemma shows that our pseudo-distance d behaves nicely as far as its second 
argument is concerned. 

Lemma 2.7 

For any A, B d(A, B) = min{d(A, b) : b G B} 
and 

(5) A | B = {b G B | d(A, b) = d(A, B)}. 
Proof: 

(Remember the elements of y are non-empty.) Suppose b G B. Since (A | BLi{b})(~)B ^ 
by condition (| 1) of Proposition 2.5, (A, B)R(A, b) by case (1) of Definition 2.3, and 
therefore d(A, B) < min{d(A, b) : b G B}. If b G A \ B, then (A \ B) n {6} 7^ and, by 
Definition 2.3, case (1), (A, b)R(A, B) and therefore 6) = <i(A, £?). We have shown 
that the left hand side of Equation (5) is a subset of the right hand side. Since A \ B 
is not empty there is a b G A \ B and, by the previous remark, d(A, B) = d(A, b) and 
therefore we conclude that d(A, B) = min{d(A, b) : b G B}. 

To see that the right hand side of Equation (5) is a subset of the left hand side, notice that 
d(A, B) = d(A, b) implies (A, b)R*(A, B) and therefore, by condition (| A2) of Proposition 
2.5, A j b C A I B and b G A | B. □ 
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To conclude the proof of (a), we must show that Equation (1) of Definition 1.6 holds. 
Suppose, first, that b G B, a G A and d(a, b) < d(af, b') for any a' G A, V G -B. By Lemma 
2.7, 6 G a | B and d(a, -B) < d(af, B), for any a' G A. 

We want to show now that b G A \ B. We will show that, for any a' G A, b G {a, a'} | B. 
One, then, concludes that b G A \ B by Lemma 2.6, remembering that C/ is finite. Since 
b G a | B, we may, without loss of generality, assume that a \ B ^ {a, a'} | -B. By case (2) 
of Definition 2.3, d(a',B) < d(a,B). But we already noticed that d(a,B) < d(a',B). We 
can therefore conclude that d(a, B) = d(a', B), so (a, B)R*(a', B), a \ B C {a, a'} | i? and 
finally that b G {a, a'} | B. We have shown that the right hand side of Equation (1) is a 
subset of the left hand side. 

We proceed to show that the left hand side of Equation (1) is a subset of its right hand 
side. 

Suppose that b G A | B. By condition (| 1) of Proposition 2.5, b G B. We want to show 
that there exists an a G A such that d(a, b) < d(a', b') for any a' G A, b' G B. Since the 
set U is finite, it is enough to prove that, changing the order of the quantifiers: 
(6) W E A,b' E B,3a e A such that d(a, b) < d{a! , b 1 ). 

Indeed, if Equation (6) holds, we get some a G A for every pair a', b', and we may take the 
a for which d(a,b) is minimal: it satisfies the required condition. Since A = U{{a',x} : 
x G A} (the right-hand side is a finite union) and b G A \ B, by condition (| AL) of 
Proposition 2.5, there is some x E A such that 6 G {a',x} | 5. We distinguish two 
cases. First, if b G a' | S, by Lemma 2.7, d(a', 6) < d(a', 6') and we may take a = a'. 
Second, suppose that b G" a' \ B. We notice that, since b G {a',x} | B, condition (| Al) of 
Proposition 2.5 implies that b G x \ B. But b ^ a' \ B also implies that {a', x} \ B ^ a' | B. 
By Definition 2.3, case (2), (x,B)R(a',B) and d(x,B) < d(a',B). But, by Lemma 2.7, 
we have d(x,b) < d(x,B) (since b G x | B) and d(a',B) < d(a',b'). We conclude that 
d(a;, b) < d(a', b'), and we can take a = x. This concludes the proof of (a). 
It remains to show the rest of (b), respect of identity, i.e. that A n B ^ implies 
A I B = A fl B, under the stronger prerequisites. Let A n -B 7^ 0. Then for 6 G -B 
5) = = 6) iff 6 G A So by Equation (5)A|B = AnB.D 



3 The logical representation results 

3.1 Introduction 

We turn to (propositional) logic. 

Definition 3.1 

A pseudo-distance d between models is called definability preserving iff \ d is. 
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d is called consistency preserving iff M(T) \ d M(T') ^ for consistent T, T' . 

The role of definability preservation in the context of preferential models is discussed e.g. 
in [Sch92], [ALS98] discusses a similar problem in the revision of preferential databases, 
and its solution. This solution requires much more complicated conditions, for this reason, 
we have not adopted it here. 

Note that |= T <-> Th(M(T)), and T = Th(M(T)) if T is deductively closed. Moreover, 
X = M(Th(X)) if there is some T s.t. X = M(T), so if the operation | is definability 
preserving, and T *T' = Th(M(T) | M(T')), then M(T * V) = M(T) \ M(T'). 

3.2 The symmetric case 

We consider the following conditions for a revision function * defined for arbitrary con- 
sistent theories on both sides. 
(*0) If h T <-> S, |= V <-> S', then T *T' = S * S', 
(*1) T * T' is a consistent, deductively closed theory, 
(*2) T'CT* T', 

(*3) If T U T is consistent, then T*T' = Cn(T U T"), 

(*s , i)C7cm(ro,ri*(roVT 2 )),Con(ri,T 2 *(riVT3)),C7on(r 2 ,r3* 

(T fc _! V T )) imply Con(T u T * (T k V 7\)). 

Note: (*4) of Definition 1.2 is for free, i.e. a consequence of (*S1) and the other conditions. 

The following Example 3.1, very similar to Example 1.1, shows that, in general, a revision 
operation defined on models via a pseudo-distance by T * T' := Th(M(T) \d M(T')) will 
not satisfy (*S1), unless we require \d to preserve definability. 

Example 3.1 

Consider an infinite propositional language C. We reinterpret the models of Example 1.1 
as follows: 

Let T, Ti, T 2 be complete (consistent) theories, T' a theory with infinitely many models, 
T, T',T 2 pairwise inconsistent. Let M(T) := {m}, M(7\) := {mi}, M(T 2 ) := {m 2 }, 
M(T') = X U {mi} and T/i(X) = T". (See Figure 1.1.) 

Then M(T) \ M(T') = X, but T*T' := Th(X) = V. We easily verify Con(T, T 2 *(TVT)), 
Con(T 2 , T * (T 2 V 71)), Con(T, 7\ * (T V T)), Con(T 1: T * (7\ V T')), Con(T, T'*(TV T)), 
and conclude by Loop (i.e. (*£!)) Con(T 2 ,T * (T' V T 2 )), which is wrong. □ 



We finally have 
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Proposition 3.1 

Let £ be a propositional language. 

(a) A revision operation * is representable by a symmetric consistency and definability 
preserving pseudo-distance iff * satisfies (*0) — (*2), (*S1). 

(b) A revision operation * is representable by a symmetric consistency and definability 
preserving, identity-respecting pseudo-distance iff * satisfies (*0) — (*3), (*S1). 

Proof: 

We prove (a) and (b) together. 

For the first direction, let y := {M(T) : T a consistent £ -theory}, and define M(T) | 
M(T') := M(T * T'). 

By (*0), this is well-defined, | is obviously definability preserving, and by (*1), M(T) | 

M(T') e y. 

We show the properties of Proposition 2.2. (| 1) holds by (*2), if (*3) holds, so will 
(| 2). (| 51) holds by (*S1) : E.g. (M(Ti) | (M(T ) U M(T 2 ))) n M(T ) ^ iff (M(Ti) | 
M(T V T 2 )) n M(T ) ^ iff (by definition of |) M(7\ * (T V T 2 )) n M(T ) ^ iff 
Con(T x * (T V T 2 ),T ). By Proposition 2.2, | can be represented by an - if (| 2) holds, 
identity respecting - symmetric pseudo-distance d, so M(T * T") = M(T) | M(T') = 
M(T) \ d M(T'), and Th(M(T * T')) = Th(M(T) \ d M(T')). As T * V is deductively 
closed, T * T' = Th(M(T * T')). 

Conversely, define T * T := Th(M(T) \ d M(T')). We use Proposition 2.2. (*0) and 
(*1) will trivially hold. By (| 1), (*2) holds, if (| 2) holds, so will (*3). As above, we 
see that (*S1) holds by (| SI), where now (M(7\) | d M(T V T 2 )) n M(T ) ^ iff 
M(7\ * (T V T 2 )) n M(T ) ^ by definability preservation. □ 



3.3 The not necessarily symmetric case 

Recall that we work here with a language defined by finitely many propositional variables. 
For the not necessarily symmetric case, we consider the following conditions for a revision 
function * defined for arbitrary consistent theories on both sides. 
(*0) If h T <-> S, \= V <-> S', then T * V = S * S', 
(*1) T * T' is a consistent, deductively closed theory, 
(*2) T C T * T', 

(*3) If T U T' is consistent, then T * T' = Cn(T U T'), 
(*A1) (S V 5") * T h (S *T)W (S 1 * T), 
(*A2) If (5, T)R*(S, T), then S*T h S* (T VT'), 
(*A3) If (5, T)R*(S', T), then 5*Th(5V5')*T, 
(*A4) If (S,T)R*(S',T') and Con(S',T'), then Can{S,T). 
Where the relation i? is defined by 
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(1) If Con(S * (T V T'),T), then (S, T)R(S, T'), 

(2) If (S V S') * T ^ S' * T, then (S, T)R(S', T), 
and, in the identity-respecting case, in addition by 

(3) If Con(S,T), then (S,T)R(S' ,T). 

Note that by finiteness, any pseudo- distance is automatically definability preserving. We 
have 

Proposition 3.2 

Let £ be a finite prepositional language. 

(a) A revision operation * is representable by a consistency preserving pseudo-distance iff 
* satisfies (*0) — (*2), (*A1) — (*A3), where the relation R is defined from the first two 
cases. 

(b) A revision operation * is representable by a consistency preserving, identity-respecting 
pseudo-distance iff * satisfies (*0) — (*3), (*A1) — (*A4), where the relation R is defined 
from all three cases. 

Proof: 

We show (a) and (b) together. 

We first note: If T * T' = Th(M(T) | M(T')), then by definability preservation in the 
finite case M(T * T) = M(T) | M(T'), so (M(S) \ M(T) U M{T')) n M(T) ± 
Con(S*(TVT'),T) and (M(S)UM(S')) \ M(T) ± M(S') \ M(T) (SVS')*T ^ S'*T. 
Thus, the relation R defined in Definition 2.3 between sets of models, and the relation R 
as just defined between theories correspond. 

For the first direction, let y := {M(T) : T a consistent £ -theory}, and define M(T) | 
M(T') :— M(T * T"). 

By (*0), this is well-defined, and by (*1), M(T) \ M(T') e y. 

We show the properties of Proposition 2.5. (| 1) holds by (*2). (| Al) : We show (M(S) U 
M(S')) | M(T) C (M(S) | M(T))U(M(S') \ M(T)). By (*A1), (SVS')*T h (S*T)V(S'* 
T), so (M(S)UM(S')) | M(T) = M(SVS') \ M(T) = M((SVS')*T) C M(S*T)UM(S'*T) 
= (M(S) | M(T)) U (M(S') | M(T)). For (| A2) : Let (M(S), M(T))R*(M(S), M(T')), 
so by the correspondence between the relation R between sets of models, and the relation 
R between theories, (S,T)R*(S,T% so by (*A2) S * T h S * (T V T'), so M(S') | M(T) C 
M(S) | (M(T) U M(T')). (| A3) : Similar, using (*A3). If * satisfies (*3) and (*A4) and 
i? is also generated by case (3), then (| 2) and (| A4) will hold by similar arguments. 
Thus, by Proposition 2.5, there is an (identity-respecting) pseudo-distance d representing 
|, M(T*T') = M{T) \ d M(T') holds, so by deductive closure of T*T', T*T' = Th(M(T) \ d 
M(T')). 

Conversely, define T*T' := Th(M(T) \ d M(T')). We use again Proposition 2.5. (*0) and 
(*1) will trivially hold. The proof of the other properties closely follows the proof in the 
first direction. □ 
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4 Conclusion 



We proposed a pseudo-distance semantics for the AGM theory of revision. Our semantics 
is in line with AGM's identification of epistemic states with belief sets. It validates 
additional postulates that ensure coherence conditions concerning the dependence of the 
revision operator * on its left argument. Those postulates have been exactly characterized 
by representation results in the case of symmetric pseudo-distances and only in the finite 
case for general pseudo-distances. 

The question of a representation theorem for the infinite case of general pseudo-distances 
with conditions in our style stays open. As our main results are purely algebraic in nature, 
one can be quite confident that important parts of our constructions can be used in the 
richer situation, in which epistemic states contain more than belief sets. 
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